IN THE CLAIMS 



Claim 1 (currently amended) A digital signature cryptographic method , performed by a 
computing device, the method comprising: 

supplying a set SI of k polynomial functions as a public-key, the set SI 
including the functions Pi(xi,...,Xn+v, yi,...,yk),..., Pk(xi,...,Xn+v, yi,...,ykX where k, v, 
and n are integers, xi,...,Xn+v are n+v variables of a first type, yi,...,yk are k variables of 
a second type, and the set S 1 is obtained by applying a secret key operation on a set S2 
of k polynomial functions P'i(ai,...,an+v,yi,...,yk),...,P'k(ai,...,an+v,yi,...,yk) w^here 
ai,„.,an+v are n+v variables which include a set of n "oil" variables ai,...,an, and a set of v 
"vinegar" variables an+i,...,an+v, the supplying comprising selecting the number v of 
"vinegar" variables to be greater than the number n of "oil" variables; 

providing a message to be signed; 

applying a hash function on the message to produce a series of k values 

bi,...,bk; 

substituting the series of k values bi,...,bk for the variables yi,...,yk of 
the set S2 respectively to produce a set S3 of k polynomial functions P"i(ai,...,an+v)5..-5 
P"k(ai,...,an+v); 

selecting v values a'n+iv^a'n+v for the v "vinegar" variables an+iv-jan+v; 

solving a set of equations P"i(ai,...,an,a'n+i5.",a'n+v)=0,..., 
P"k(ai,...,an,a'n-!-i,.",a'n+v)'=0 to obtain a solution for a'i,...,a'n; and 

applying the secret key operation to transform a'i,...,a'n+v to a digital 
signature ci Cn+v : and 

assigning e j ^ Cn +v as the digital signature of the message . 

Claim 2 (previously presented) A method according to claim 1 and also comprising 
verifying the digital signature. 

Claim 3 (previously presented) A method according to claim 2 and wherein said 
verifying comprises: 

obtaining the signature ei,...,en+v, the message, the hash function and the 

public key; 
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applying the hash function on the message to produce the series of k 
values bi,...,bk; and 

verifying that the equations Pi(ei,...,en+v,bi,...,bk)=0,..., Pk(ei,...,en+v, 
bi,...,bk)=0 are satisfied. 

Claim 4 (previously presented) A method according to claim 1 and wherein the method 
comprises an HFEV scheme and the set S2 comprises a set f(a) of k polynomial 
functions of the HFEV scheme. 

Claim 5 (previously presented) A method according to claim 1 and wherein the method 
comprises a UOV scheme and the set S2 comprises a set S of k polynomial functions of 
the UOV scheme. 

Claim 6 (canceled) 

Claim 7 (previously presented) A method according to claim 1 and wherein v is 
selected such that is greater than 2^^, where q is the number of elements of a finite 
field K over which the sets SI, S2 and S3 are provided. 

Claim 8 (previously presented) A method according to claim 1 and wherein said 
supplying comprises obtaining the set SI from a subset S2' of k polynomial functions of 
the set S2, the subset S2' being characterized in that all coefficients of components 
involving any of the yu-.-^yk variables in the k polynomial functions 
P'i(ai,...,an+v,yi,...,yk),...,P'k(ai,...,an+v,yi,...,yk) are zero, and the number v of "vinegar" 
variables is greater than the number n of "oil" variables. 

Claim 9 (previously presented) A method according to claim 8 and wherein the set S2 
comprises a set S of k polynomial functions of a UOV scheme, and the number v of 
"vinegar" variables is selected to satisfy one of the following conditions: 

(a) for each characteristic p other than 2 of a field K in an "Oil and 
Vinegar" scheme of degree 2, v satisfies the inequality q^^""^^ * n"* > 2"^°, 
where K is a finite field over which the sets SI, S2 and S3 are provided, 
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(b) for p = 2 in an "Oil and Vinegar" scheme of degree 3, v is greater 
than n*(l + sqrt(3)) and less than or equal to nV6, and 

(c) for each p other than 2 in an "Oil and Vinegar" scheme of degree 3, v 
is greater than n and less than or equal to n"*. 

Claim 10 (previously presented) A method according to claim 8 and wherein the set S2 
comprises a set S of k polynomial functions of a UOV scheme, and the number v of 
"vinegar" variables is selected to satisfy the inequalities v<n^ and q^^'"^'' * n'*>2'**^ for a 
characteristic p=2 of a field K in an "Oil and Vinegar" scheme of degree 2, where K is a 
finite field over which the sets SI, S2 and S3 are provided and q is the number of 
elements of K. 

Claim 1 1 (original) A method according to claim 1 and wherein said secret key 
operation comprises a secret affine transformation s on the n+v variables ai,...,an+v. 

Claim 12 (original) A rnethod according to claim 4 and wherein said set S2 comprises 
an expression including k functions that are derived from a univariate polynomial. 

Claim 13 (original) A method according to claim 12 and wherein said univariate 
polynomial includes a univariate polynomial of degree less than or equal to 100,000. 

Claim 14 (original) A cryptographic method for verifying the digital signature of 
claim 1, the method comprising: 

obtaining the signature ei,...,en+v, the message, the hash function and the 

public key; 

applying the hash fiinction on the message to produce the series of k 
values bi,...,bk; and 

verifying that the equations Pi(ei,...,en+v,bi,...,bk)=0,..., Pk(ei,...,en+v, 
bi,...,bk)=0 are satisfied. 

Claims 15-17 (canceled) 
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Claim 18 (currently amended) A computer system for generating a signature^ g e n e rator 
comprising: 

a signature input receiver operative to receive a set SI of k polynomial 
functions as a public-key and a message to be signed, the set SI including the functions 
Pi(xi,...,Xn+v, yi,..*,yk),.-., Pk(xi,...,Xn+v, yb-..,yk), where k, v, and n are integers, 
xi,...,Xn+v are n+v variables of a first type, yi,.. .,yk are k variables of a second type, and 
the set SI is obtained by applying a secret key operation on a set S2 of k polynomial 
functions P'i(ai,...,an+v,yi,...,yk),...,P'k(ai,...,an+v,yi,.",yk), where ai,...,an+v are n+v 
variables which include a set of n "oil" variables ai,...,an, and a set of v "vinegar" 
variables an+i,...,an+v and the number v of "vinegar" variables is greater than the number 
n of "oil" variables; and 

a signature processor operatively associated with the signature input 
receiver and operative to perform the following operations: 

to apply a hash function on the message to produce a series of k 

values bi,...,bk, 

to substitute the series of k values bi,...,bk for the variables 
yi, ..,yk of the set S2 respectively to produce a set S3 of k polynomial functions 
P"i(ai,...,an+v),..., P"k(ai,...,an+v), 

to select V values a'n+i,...,a'n+v for the v "vinegar" variables 

an+l vjan+vS 

to solve a set of equations P"](ai,...,an,a'n+i,...,a'n+v)=0,,.., 
P"k(ai,...,an,a'n+i,...,a'n+v)=0 to obtain a solution for a'i,...,a'n; and 

to apply the secret key operation to transform a'i,...,a'n+v into a 
digital signature ei Cn+v : and 

to assign eK...,en + v as the digital signature of the message . 

Claim 19 (previously presented) Apparatus according to claim 18 and also 
comprising a signature verifier operatively associated with the signature processor and 
operative to verify the digital signature. 
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Claim 20 (previously presented) Apparatus according to claim 19 and wherein said 
signature verifier is operative to verify the digital signature by performing the following 
operations: 

obtaining the signature ei,...,en+v, the message, the hash function and the 

public key; 

applying the hash function on the message to produce the series of k 
values bi,...,bk; and 

verifying that the equations Pi(ei,...,en-Hv,bi,...,bk)=0,..., Pk(ei,...,en+v, 
bi,...,bk)=0 are satisfied. 

Claim 21 (previously presented) Apparatus according to claim 18 and wherein the 
signature processor is operative to perform an HFEV scheme, and the set S2 comprises 
a set f(a) of k polynomial functions of the HFEV scheme. 

Claim 22 (previously presented) Apparatus according to claim 18 and wherein the 
signature processor is operative to perform a UOV scheme, and the set S2 comprises a 
set S of k polynomial functions of the UOV scheme. 

Claim 23 (canceled) 

Claim 24 (previously presented) Apparatus according to claim 18 and wherein v is 
selected such that is greater than 2"^^, where q is the number of elements of a finite 
field K over which the sets SI, S2 and S3 are provided. 

Claim 25 (previously presented) Apparatus according to claim 18 and wherein the 
set SI is obtained from a subset S2' of k polynomial functions of the set 82, the subset 
S2' being characterized in that all coefficients of components involving any of the 
yi5...,yk variables in the k polynomial functions P'i(ai,...,an+v,yi,...,yk)5 
...,P'k(ai,...,an+v,yi,...5yk) are zero, and the number v of "vinegar" variables is greater 
than the number n of "oil" variables. 
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Claim 26 (previously presented) Apparatus according to claim 25 and wherein the 
set S2 comprises a set S of k polynomial functions of a UOV scheme, and the number v 
of "vinegar" variables is selected to satisfy one of the following conditions: 

(a) for each characteristic p other than 2 of a field K in an "Oil and 
Vinegar" scheme of degree 2, v satisfies the inequality q^^'"^^ * n"* > 2^^, 
where K is a finite field over which the sets SI, S2 and S3 are provided, 

(b) for p = 2 in an "Oil and Vinegar" scheme of degree 3, v is greater 
than n*(l + sqrt(3)) and less than or equal to nV6, and 

(c) for each p other than 2 in an "Oil and Vinegar" scheme of degree 3, v 
is greater than n and less than or equal to n"^. 

Claim 27 (previously presented) Apparatus according to claim 25 and wherein the set 
S2 comprises a set S of k polynomial functions of a UOV scheme, and the number v of 
"vinegar" variables is selected to satisfy the inequalities v<n^ and q^^'"^* * n"^ >2'^^ for a 
characteristic p=2 of a field K in an "Oil and Vinegar" scheme of degree 2, where K is a 
finite field over which the sets SI, S2 and S3 are provided and q is the number of 
elements of K. 

Claim 28 (previously presented) Apparatus according to claim 18 and wherein said 
secret key operation comprises a secret affine transformation s on the n+v variables 
ai,...,an4-v 

Claim 29 (previously presented) Apparatus according to claim 21 and wherein said set 
S2 comprises an expression including k functions that are derived from a univariate 
polynomial. 

Claim 30 (previously presented) Apparatus according to claim 29 and wherein said 
univariate polynomial includes a univariate polynomial of degree less than or equal to 
100,000. 
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Claim 31 (previously presented) A signature verifier for verifying the digital signature 
generated by the signature generator of claim 18, the signature verifier comprising a 
verifier processor operative to perform the following operations: 

to obtain the signature ei,...,en+v5 the message, the hash function and the 
public key via the signature input receiver; 

to apply the hash function on the message to produce the series of k 
values bi,...,bk; and 

to verify that the equations Pi(ei,...,en+v,bi,...,bk)=0,..., Pk(ei,...,en+v, 
bi,i..,bk)=0 are satisfied. 

Claims 32 - 34 (canceled) 

Claim 35 (currently amended) A digital signature generated by a computer system, the 
digital signature comprising: 

a signature ei,...,en+v generated by processing a set SI of k polynomial 
functions provided as a public-key and a message to be signed, where the set SI 
includes functions Pi(xi,...,Xn+v, yi,...,yk),..., Pk(xi,.",Xn+v, yi,...,yk), where k, v, and n 
are integers, xi,...,Xn+v are n+v variables of a first type, yi,...,yk are k variables of a 
second type, and the set SI is obtained by applying a secret key operation on a set S2 of 
k polynomial functions P'i(ai,,..,an+v,yi,...,yk),...,P'k(ai,...,an+v,yi,...,yk) where ai,...,an+v 
are n+v variables which include a set of n "oil" variables ai,...,an, and a set of v 
"vinegar" variables an+i,...,an+v, and the number v of "vinegar" variables is greater than 
the number n of "oil" variables, so that a hash function applied on the message to 
produce a series of k values bi,.. .,bk that are substituted for the variables yi,. ..,yk of the 
set S2 respectively to produce a set S3 of k polynomial functions P"i(ai,...,an+v),...5 
P"k(ai,...,an+v) and v values a'n+i ?"«5a'n+v that are selected for the v "vinegar" variables 
an+iv-jan+v, enable to solve a set of equations P"i(ai,...,an,a'n+i,."?a'n+v)=0,..., 
P"k(ab...,an,a'n+iv"ja'n+v)=0 to obtain a solution for a'i,...,a'n, and application of the 
secret key operation transforms a'i,...,a'n+v into th e digital signatur e ei,.,.,en+v which is 
assigned as the digital signature of the message . 

Claim 36 (previously presented) A digital signature produced by the method of claim 1. 
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Claim 37 (previously presented) A method according to claim 1 and wherein said 
supplying comprises obtaining the set SI from a subset S2' of k polynomial functions of 
the set S2, the subset S2' being characterized in that all coefficients of components 
involving orders higher than 1 of any of the n "oil" variables ai,. . .,an and coefficients of 
components involving multiplication of two or more of the n "oil" variables ai,...,an in 
the k polynomial functions P'i(ai,...,an+v,yi,...,yk), ...,P'k(ai,...,an+v,yi,...,yk) are zero, 
and the number v of "vinegar" variables is greater than the number n of "oil" variables. 

Claim 38 (previously presented) A method according to claim 37 and wherein the set 
S2 comprises a set S of k polynomial functions of a UOV scheme, and the number v of 
"vinegar" variables is selected to satisfy one of the following conditions: 

(a) for each characteristic p other than 2 of a field K in an "Oil and 
Vinegar" scheme of degree 2, v satisfies the inequality q^^""^"** n"* > 2"*^, 
where K is a finite field over which the sets SI, S2 and S3 are provided, 

(b) for p = 2 in an "Oil and Vinegar" scheme of degree 3, v is greater 
than n*(l + sqrt(3)) and less than or equal to nV6, and 

(c) for each p other than 2 in an "Oil and Vinegar" scheme of degree 3, v 
is greater than n and less than or equal to n^. 

Claim 39 (previously presented) A method according to claim 37 and wherein the set 
S2 comprises a set S of k polynomial functions of a UOV scheme, and the number v of 
"vinegar" variables is selected to satisfy the inequalities v<n^ and q^^'"^'^* >2^^ for a 
characteristic p=2 of a field K in an "Oil and Vinegar" scheme of degree 2, where K is a 
finite field over which the sets SI, S2 and S3 are provided and q is the number of 
elements of K. 

Claim 40 (previously presented) Apparatus according to claim 18 and wherein the set 
SI is obtained from a subset S2' of k polynomial functions of the set S2, the subset S2' 
being characterized in that all coefficients of components involving orders higher than 1 
of any of the n "oil" variables ai,...,an and coefficients of components involving 
multiplication of two or more of the n "oil" variables ai,...,an in the k polynomial 
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functions P'i(ai,...,an+v,yi,...,yk), ...,P'k(ai,.",an+v,yi,...,yk) are zero, and the number v of 
"vinegar" variables is greater than the number n of "oil" variables. 

Claim 41 (previously presented) Apparatus according to claim 40 and wherein the set 
S2 comprises a set S of k polynomial functions of a UOV scheme, and the number v of 
"vinegar" variables is selected to satisfy one of the follow^ing conditions: 

(a) for each characteristic p other than 2 of a field K in an "Oil and 
Vinegar" scheme of degree 2, v satisfies the inequality q^^ "^ ** n"^ > 2"*^, 
where K is a finite field over which the sets SI, S2 and S3 are provided, 

(b) for p = 2 in an "Oil and Vinegar" scheme of degree 3, v is greater 
than n*(l + sqrt(3)) and less than or equal to nV6, and 

(c) for each p other than 2 in an "Oil and Vinegar" scheme of degree 3, v 
is greater than n and less than or equal to n"^. 

Claim 42 (previously presented) Apparatus according to claim 40 and wherein the set 
S2 comprises a set S of k polynomial functions of a UOV scheme, and the number v of 
"vinegar" variables is selected to satisfy the inequalities v<n^ and q^^""^** n"* >2'^° for a 
characteristic p=2 of a field K in an "Oil and Vinegar" scheme of degree 2, where K is a 
finite field over which the sets SI, S2 and S3 are provided and q is the number of 
elements of K. 

Claim 43 (new) A method according to claim 1 and wherein the computing device 
comprises at least one of the following: a computer; and a smart card. 

Claim 44 (new) Apparatus according to claim 18 and wherein the computer system 
comprises at least one of the following: a computer; and a smart card. 
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